Privacy Policy

Who we are

Edinburgh Bootcamp ("we", "us") is operated by David Waine, Fairmilehead, Edinburgh. Contact: info@edinburghbootcamp.co.uk, 07751 354 415.

What we collect

Enquiry form: your name, email, phone number and message. Taster form: your name, email, phone number and which class you want to try. Member accounts: your email address and encrypted login credentials. Bookings: which sessions you book. Event tickets: the name and email you give at Stripe's checkout and how many tickets you bought, so we know who's coming; anyone can buy, with or without an account. Payments: today, memberships and classes are paid by card at class. Online payments, when enabled, are handled entirely by Stripe — your card details never touch our servers.

Your health questionnaire (PAR-Q)

Before you train we ask you to complete a PAR-Q: seven yes/no health questions, any detail you add, an emergency contact and your name. This is health data, so we only hold it with your explicit consent, given on the form. It is used only so our coaches can train you safely and know who to call in an emergency. Only you and our coaches can see it. Submitting it again replaces the old answers, and it is deleted when you delete your account.

Why we use it

To answer your enquiries, book your classes, manage your membership, and send you service emails you cannot opt out of while you hold an account — booking confirmations, cancellations and account emails. Separately, if you turn it on we may send occasional news about classes and offers; that is off unless you choose it, and you can turn it off in your account or from the unsubscribe link in any such email. We never sell your data.

Who processes it for us

Cloudflare (website hosting and image storage), Supabase (accounts and bookings database), Resend (transactional email), Mailchimp (Intuit — the newsletter, if you have opted in), Stripe (payments), and Google (the "Ask us" chat assistant — the question you type is sent to Google's Gemini API to generate the answer, so do not put personal details in it). Each processes your data only on our instructions. The site also loads fonts from Google Fonts and shows YouTube video previews — when you play a video, YouTube (Google) may set its own cookies and sees your IP address, as does Google when fonts load.

Cookies

We set essential cookies only — they keep you signed in to your account. We use no advertising or analytics cookies ourselves; the embedded YouTube player may set its own once you choose to play a video.

How long we keep it

Enquiry and taster forms are not stored in a database — they are emailed to us and kept in that mailbox. Your account, bookings and credit history are kept while you use them. An account that goes two years without being signed into, booked with or topped up is deleted automatically, with everything in it — unless it still has an active membership or unused class credits. You can also delete your account yourself, any time, from the app or this website, and it happens immediately. Card payments are recorded by Stripe, which keeps those records for as long as the law requires.

See deleting your account for exactly how, and what it removes.

Your rights

You can ask for a copy of your data or have it corrected — email info@edinburghbootcamp.co.uk and we'll act within one month. Deletion doesn't need to go through us: you delete your own account, any time, from the app or this website. You can complain to the ICO (ico.org.uk) if you're unhappy with how we've handled your data.